Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IWDflqoNEONHsCd1E1PjaB4aEt4.cer
File:                     IWDflqoNEONHsCd1E1PjaB4aEt4.cer (raw, json)
Hash identifier:          VjSLqeRxUPf1LYqIIoTUKDNoUMyuKBZ/fG0B2y1eRDA=
Subject key identifier:   21:60:DF:96:AA:0D:10:E3:47:B0:27:75:13:53:E3:68:1E:1A:12:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01863A4B56CDED42A1FAE894E0A2CB7C5BF3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/ba2876-ad98-4897-ab19-6380d04bb90d/1/IWDflqoNEONHsCd1E1PjaB4aEt4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/ba2876-ad98-4897-ab19-6380d04bb90d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 10 Feb 2023 07:47:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.56.144.0/24

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 09:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:4b:56:cd:ed:42:a1:fa:e8:94:e0:a2:cb:7c:5b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 10 07:47:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2160df96aa0d10e347b027751353e3681e1a12de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:55:c6:b9:38:ca:7d:ee:11:f4:67:20:c6:
                    73:f6:64:04:e7:de:e9:95:28:71:ae:a8:b7:54:3a:
                    e4:98:3e:8c:d5:c8:05:36:69:3b:6d:1c:b2:76:d3:
                    67:95:1f:06:88:be:ff:42:a1:5b:34:23:87:42:79:
                    41:bb:eb:81:f6:f6:ff:48:26:d0:53:16:37:ab:2d:
                    5d:65:c8:bb:e4:f3:64:30:91:3b:95:13:17:27:bb:
                    34:7f:d6:b9:07:3e:44:53:c4:6d:84:71:73:3b:e5:
                    19:70:02:3d:a2:aa:92:26:12:2a:ee:e3:d1:19:df:
                    2a:81:10:17:05:d5:5e:d1:f8:58:d2:cd:67:f7:af:
                    a1:13:4f:74:88:f6:18:be:37:f2:9b:9d:cf:ca:09:
                    b6:62:ae:d8:32:4c:fd:e1:5f:25:24:d2:2f:5f:5b:
                    7e:3f:8d:76:ee:51:8c:e9:b9:c8:de:5f:0d:13:61:
                    d6:a2:7b:55:b3:87:88:cf:79:2b:5a:c9:15:4e:7d:
                    6a:ba:3d:cb:70:7a:07:95:25:39:c4:02:c4:3c:01:
                    1e:86:df:0a:c4:be:d0:9c:3e:c8:03:68:72:af:86:
                    e7:cc:57:86:80:d6:98:f9:b4:0a:d8:82:16:99:4d:
                    89:ab:ad:e6:31:cf:a0:c3:27:3b:d8:61:4a:5a:83:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:60:DF:96:AA:0D:10:E3:47:B0:27:75:13:53:E3:68:1E:1A:12:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ba2876-ad98-4897-ab19-6380d04bb90d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ba2876-ad98-4897-ab19-6380d04bb90d/1/IWDflqoNEONHsCd1E1PjaB4aEt4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:1e:df:da:a6:8d:d4:07:43:8d:16:b1:44:c7:f5:ea:8f:
         49:ca:79:77:33:8c:35:55:36:35:02:8b:9d:46:1c:a9:06:08:
         eb:50:00:38:ba:c2:9b:1d:f2:17:db:3a:e2:ce:43:df:47:33:
         c8:7b:18:bc:a5:37:db:68:62:e9:9b:a7:95:1d:df:a6:6d:4b:
         27:fb:a4:57:c6:d2:38:fe:9e:38:e3:fe:ec:58:8c:bd:2d:79:
         72:3c:ff:04:4f:33:a9:ef:1f:7d:b8:7c:6e:7c:e3:16:81:9d:
         fd:0a:bf:ac:32:c4:4e:4f:7d:33:f4:7e:fc:7a:cc:3d:45:c2:
         23:94:83:91:d9:d5:b2:98:7b:ec:6d:7e:07:db:b3:af:ac:a8:
         72:60:1e:c1:d6:ff:20:57:b4:9a:08:8c:3c:de:c8:a5:a6:34:
         cd:5a:a1:68:c3:89:a0:91:24:8d:83:a8:33:98:4f:0b:be:4d:
         8e:d9:df:e9:7d:d1:a0:24:fd:69:1d:84:b4:35:bd:69:8a:5d:
         21:8b:f8:ee:e3:f5:61:6c:73:95:e2:4c:4e:03:db:b7:97:18:
         a7:64:10:1a:f0:0b:e0:20:f5:59:32:d3:13:9e:be:b0:a8:87:
         d3:60:38:2a:61:08:f1:0f:13:05:e8:6c:0e:02:40:dd:53:5e:
         ad:da:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----